Configure Google OAuth

Let users sign in with Google in a few steps. This is optional; email/password and magic links work without it.

Step 1: Create OAuth credentials

1. Open the Google Cloud Console and create (or select) a project.
2. Configure the OAuth consent screen with your app name and support email.
3. Under Credentials, create an OAuth client ID of type Web application.

Step 2: Set redirect URIs

Add the callback URL for each environment. Locally:

http://localhost:4000/api/v1/auth/google/callback

For production, add the same path on your API domain, for example:

https://api.yourdomain.com/api/v1/auth/google/callback

Step 3: Add the credentials to FastStaq

In server/.env:

GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=your-client-secret
GOOGLE_REDIRECT_URI=http://localhost:4000/api/v1/auth/google/callback

Set GOOGLE_REDIRECT_URI to match the environment you are running.

Step 4: Test the flow

1. Restart the server.
2. Go to /login and choose Continue with Google.
3. Approve access and confirm you land signed in.

Notes

• Accounts created through Google are email-verified automatically.
• If admin 2FA enforcement is on, Google-authenticated admins are handled appropriately; review the ADMIN_2FA_ENFORCED notes when locking down the admin surface.

Related articles

• Authentication module
• Managing your account and 2FA

Still need help?

Open a support ticket if the callback errors (often a redirect URI mismatch).